Privacy Policy

1. Who we are

Deska ("Deska", "we", "us") provides desk booking software for hybrid offices, accessible at deska.me. This policy describes how we handle personal data collected through the Deska service.

2. Data we collect

• Account data: email address, name, role, optional Telegram identifier, and authentication credentials securely processed by our authentication provider.
• Workspace data: company name, office layouts, desk and QR identifiers, desk assignments, and booking records created inside Deska.
• Usage data: pages visited, features used, and error logs — used to improve the service.
• Payment data: billing is handled by Stripe. We store only Stripe customer and subscription IDs; we never see your full card number.

3. How we use your data

• To provide and operate the Deska service.
• To send transactional emails (booking confirmations, password resets, billing receipts).
• To detect and prevent abuse, fraud, or security incidents.
• To comply with legal obligations.

We do not sell your data to third parties.

4. Organisation-provided workspace content

Each customer organisation provides its office layouts, desk information, QR identifiers, and related workspace content, or expressly asks Deska to upload that content on its behalf. The organisation is responsible for ensuring that it has the rights and permissions needed to provide and use this content. Deska stores and displays it only to operate the Service for that organisation and its authorised users.

5. Data storage and security

We use service providers including Supabase and Vercel to operate Deska. Workspace data is isolated per organisation, and data in transit is encrypted via TLS.

6. Mobile app permissions

The Deska iOS app requests camera access only when you choose to scan a desk QR code. Camera images are processed on the device and are not stored or uploaded by Deska. The QR identifier is sent securely to Deska to complete your check-in.

7. Data retention

We retain your data for as long as your account is active. If you close your account, authentication access is removed and personal profile data is deleted or de-identified. Limited booking and audit records may be retained when required for the legitimate operation, security, and compliance needs of your organisation.

8. Your rights

Depending on your location you may have the right to access, correct, export, or delete your personal data. You can initiate account deletion from the Deska iOS app or email privacy@deska.me.

9. Cookies

Deska uses only essential session cookies required for authentication. We do not use advertising or tracking cookies.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or via an in-app notice. Continued use of Deska after changes take effect constitutes acceptance.

11. Contact

Questions about this policy? privacy@deska.me